NIST SP 800-171 Compliance Assessment & SPRS Submission

The contract requires a comprehensive NIST SP 800-171 compliance assessment to evaluate the safeguarding of controlled unclassified information within the contractor’s information systems. The assessment must identify all deficiencies relative to the 110 security requirements outlined in the NIST publication and provide a detailed analysis of the system architecture supporting those controls. Results of the assessment must be formally documented and submitted to the Supplier Performance Risk System (SPRS) with an accurate compliance score reflecting the organization’s current security posture. The work is classified as a subcontract under NAICS code 541612 and is issued by the Department of Defense’s Maritime Supply Chain ESOc Buys office. Proposals must be submitted by the deadline of May 11, 2026, and the assessment must be performed in a manner that ensures full alignment with federal cybersecurity standards and transparency for government risk evaluation.